Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.mft
File:                     AKGRL91T8vGf6bza51RJZoFZM8w.mft (raw, json)
Hash identifier:          o+56GtG4zGyj9dTFyW9QDMcynMf+RfQkNfgw3E6v3UU=
Subject key identifier:   34:E0:60:AA:A9:CC:61:5B:AB:B2:22:4F:D8:63:2E:6B:37:2C:C8:E7
Authority key identifier: 00:A1:91:2F:DD:53:F2:F1:9F:E9:BC:DA:E7:54:49:66:81:59:33:CC
Certificate issuer:       /CN=00a1912fdd53f2f19fe9bcdae7544966815933cc
Certificate serial:       019F86B2C3A27A3FF382684591F75CC4884B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AKGRL91T8vGf6bza51RJZoFZM8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.mft
Manifest number:          C8
Signing time:             Tue 21 Jul 2026 22:01:30 +0000
Manifest this update:     Tue 21 Jul 2026 22:01:30 +0000
Manifest next update:     Wed 22 Jul 2026 22:01:30 +0000
Files and hashes:         1: AKGRL91T8vGf6bza51RJZoFZM8w.crl (hash: 1C+u/kA/7hDcgqowPjDsenuKpxb0LvDncXGrwJIKVWY=)
                          2: GzOvk8lHsu4BYLj1d10xgx8tglU.roa (hash: qwnpR7TfGpJqvG2MvNeXDUXWtBVeH7xIX0oA5goxnbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AKGRL91T8vGf6bza51RJZoFZM8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 15:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:b2:c3:a2:7a:3f:f3:82:68:45:91:f7:5c:c4:88:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00a1912fdd53f2f19fe9bcdae7544966815933cc
        Validity
            Not Before: Jul 21 22:01:30 2026 GMT
            Not After : Jul 22 22:01:30 2026 GMT
        Subject: CN=34e060aaa9cc615babb2224fd8632e6b372cc8e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ae:4e:5f:5e:c9:72:ea:16:7a:56:39:26:e0:
                    e1:34:9a:fd:a1:2f:38:25:fb:95:ef:29:49:ef:aa:
                    a1:9a:85:76:a4:f7:86:28:fa:20:33:24:e8:c9:71:
                    9f:80:7e:85:be:75:14:0c:ab:70:c5:53:dc:b4:d3:
                    22:a3:44:ae:b8:3e:20:f3:d8:5a:89:f5:2a:06:2d:
                    8f:fe:9d:19:40:7b:30:c3:4c:41:fa:9c:c9:ba:37:
                    29:ed:27:ae:3b:ab:de:db:62:31:cf:5d:e8:a9:82:
                    e1:98:70:9e:b0:13:59:b8:b6:11:3a:67:72:90:98:
                    b0:7b:3f:7e:82:45:a2:29:e9:62:a3:d8:04:e6:6d:
                    57:d3:40:57:d4:a2:5e:08:b9:a3:0b:95:42:cd:ba:
                    9d:38:05:ce:5c:52:7b:eb:96:04:dc:ce:3b:03:69:
                    db:66:f6:e2:0e:32:32:af:6c:ee:b4:a4:44:b2:fe:
                    a1:bb:26:c9:34:fe:b2:19:bc:76:94:68:ac:7c:66:
                    8d:f7:95:dd:37:f3:29:50:37:7b:47:af:0d:6b:30:
                    34:ad:26:0d:4b:9a:75:9f:be:b0:47:b8:5b:3b:6b:
                    fd:1d:44:7d:6d:5b:25:94:e0:46:c1:25:26:45:53:
                    a9:d1:34:c5:99:21:ce:9e:6c:7f:bb:92:8f:af:be:
                    8f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E0:60:AA:A9:CC:61:5B:AB:B2:22:4F:D8:63:2E:6B:37:2C:C8:E7
            X509v3 Authority Key Identifier:
                keyid:00:A1:91:2F:DD:53:F2:F1:9F:E9:BC:DA:E7:54:49:66:81:59:33:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKGRL91T8vGf6bza51RJZoFZM8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:79:3f:4e:a2:1a:a0:26:88:63:55:ce:ae:d8:0b:6a:6e:af:
         1d:71:88:cd:27:4b:12:b6:47:f1:0e:5e:e6:20:b6:a7:73:6b:
         d1:8d:a5:3a:94:2f:b2:3d:29:cb:40:0c:d8:b8:dc:b4:e1:05:
         6d:ba:ea:1b:48:25:91:78:aa:07:43:79:1f:59:ec:c5:61:01:
         06:3e:2a:3e:bd:63:d5:e0:f2:80:93:81:16:3d:f2:2b:33:2b:
         98:4c:87:91:b3:50:d0:a7:37:0e:b0:6d:37:b8:3a:f4:fb:54:
         fb:c0:4f:59:68:c4:3d:ac:5b:ca:71:24:9b:5e:3a:33:ef:62:
         ad:32:81:62:a3:1b:52:d3:42:c5:c8:64:69:54:c5:de:22:8c:
         f6:72:b7:64:d0:fc:d5:bc:1b:dc:d4:32:f7:bb:3c:3e:4f:0a:
         45:ad:82:0a:ae:2a:c1:52:ea:14:cd:2a:61:49:cd:e8:50:82:
         b0:fb:30:e5:48:da:0f:4e:1f:00:bf:8e:b2:bd:f1:10:a5:ad:
         89:63:c4:d6:9b:c1:84:73:ca:df:b3:8f:f5:0d:2b:a5:da:fc:
         00:2a:31:ec:39:91:0d:21:4a:e2:03:a8:f6:49:d2:83:50:5a:
         89:9d:ac:9b:48:81:c6:26:df:d7:f7:8e:0a:ac:54:ef:ed:ed:
         cc:bf:50:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:42:42 2026 by rpki-client